$ rpki-client -vvf rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft File: zamee9M_jsdx_ROc1rNwDJyY8jA.mft (raw, json) Hash identifier: X27H3fSOSYT0vDZppvY5n451+StLXHvTQO9IbnxrY9U= Subject key identifier: 49:E3:BC:9B:B0:10:48:96:E5:5B:CA:0A:75:F0:69:BA:5E:C6:33:81 Authority key identifier: CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30 Certificate issuer: /CN=A9182DEA/serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230 Certificate serial: 0859 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft Manifest number: 0852 Signing time: Thu 24 Apr 2025 20:35:49 +0000 Manifest this update: Thu 24 Apr 2025 20:35:49 +0000 Manifest next update: Thu 01 May 2025 20:35:49 +0000 Files and hashes: 1: zamee9M_jsdx_ROc1rNwDJyY8jA.crl (hash: ZgZQZQa/p8UG1+rsoU1cuLi6T/EMky6YKo9xdghS9jQ=) 2: 5EFDF18AC6A111EA988EB242C4F9AE02.roa (hash: KtSyotF5s+fznRFZLUutEOXHGLRSo1CUGsPPNNXjuZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2137 (0x859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182DEA, serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230 Validity Not Before: Apr 24 20:35:49 2025 GMT Not After : May 1 20:35:49 2025 GMT Subject: CN=680aa0a5-dd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:82:48:c2:65:b9:c7:bf:fd:e6:31:d0:f4:06: 34:57:ed:f9:f5:4c:00:b8:51:4e:23:1a:49:16:ea: 69:5d:b3:67:82:5b:e3:51:b0:b4:fd:81:5c:3f:42: f1:e4:2d:6f:99:71:43:a6:50:b2:5a:bb:7f:5d:36: 72:ea:54:27:3a:db:6e:bc:8f:1a:59:4f:38:a0:77: d0:42:f9:29:9b:f8:51:65:5f:7b:65:aa:39:90:5d: 0b:0e:08:b2:02:bd:10:94:a4:65:72:8e:ca:ea:f4: 3f:84:48:81:71:79:8c:53:9b:73:99:aa:5c:7c:3c: 38:d2:15:44:f5:59:8d:8e:c6:1f:9a:1d:ee:a8:46: 31:52:e5:96:4b:90:9d:42:ad:d3:9e:54:18:2d:8c: ce:1e:90:00:44:3c:f6:83:3b:3d:3e:3b:5f:4d:b5: 23:c9:38:fd:06:cc:8b:23:c2:d6:61:ee:f1:c8:3a: ec:95:46:25:fd:d1:24:b9:f9:db:27:cc:68:68:44: 87:d2:01:24:10:64:0d:e1:82:e4:7b:c5:c0:10:cd: 8e:0a:17:38:48:0e:ab:f7:06:f4:87:a2:68:76:ff: df:bc:c6:bd:99:7a:87:b4:76:a7:27:63:aa:ba:5d: 7a:4b:9d:0d:10:93:fb:bb:00:5f:4b:9f:bd:29:55: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:BC:9B:B0:10:48:96:E5:5B:CA:0A:75:F0:69:BA:5E:C6:33:81 X509v3 Authority Key Identifier: keyid:CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:19:0c:ce:97:18:77:ae:c9:96:bb:97:e2:2b:f9:a2:d1:dd: b8:91:3e:68:9f:26:7a:0c:09:67:42:8f:31:f5:46:25:e7:54: f4:74:00:b2:c4:9b:16:94:cf:89:b8:e0:3e:5a:05:f3:1c:f4: 33:cf:6b:48:fe:34:9e:0e:2b:c7:44:76:09:ca:84:59:12:0c: 1e:fc:fb:54:84:ce:d8:d4:f9:ea:e6:2f:87:1c:41:8c:61:57: 35:0c:14:a4:18:dc:35:54:75:ce:9e:25:2b:6d:a6:84:36:22: b3:da:d0:ca:20:e1:29:91:01:5c:9b:50:f8:0a:54:b9:43:70: 6c:f4:03:c3:37:19:4b:a3:bf:5a:e4:10:8e:a4:5d:46:7e:3b: fd:6f:0b:1a:56:a6:fa:d4:ee:88:d4:d2:94:af:60:67:74:a0: 2b:0f:47:14:26:47:e4:57:30:c4:ec:39:53:98:fe:aa:ee:35: 70:81:23:9b:9f:71:b9:62:1b:dd:06:23:76:17:30:24:68:48: 79:68:49:f5:97:30:ed:e0:84:71:2f:13:7d:89:b3:ef:c1:3c: c9:c3:bb:dd:a8:89:29:fa:98:ee:c8:90:6e:7a:fe:1e:65:ad: b1:2a:63:69:6b:f3:d2:59:af:47:e3:92:3b:91:fe:d8:fa:2a: 84:6f:25:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJERUExMTAvBgNVBAUTKENEQTk5RTdCRDMzRjhFQzc3MUZEMTM5Q0Q2QjM3MDBD OUM5OEYyMzAwHhcNMjUwNDI0MjAzNTQ5WhcNMjUwNTAxMjAzNTQ5WjAYMRYwFAYD VQQDEw02ODBhYTBhNS1kZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YJIwmW5x7/95jHQ9AY0V+359UwAuFFOIxpJFuppXbNnglvjUbC0/YFcP0Lx 5C1vmXFDplCyWrt/XTZy6lQnOttuvI8aWU84oHfQQvkpm/hRZV97Zao5kF0LDgiy Ar0QlKRlco7K6vQ/hEiBcXmMU5tzmapcfDw40hVE9VmNjsYfmh3uqEYxUuWWS5Cd Qq3TnlQYLYzOHpAARDz2gzs9PjtfTbUjyTj9BsyLI8LWYe7xyDrslUYl/dEkufnb J8xoaESH0gEkEGQN4YLke8XAEM2OChc4SA6r9wb0h6Jodv/fvMa9mXqHtHanJ2Oq ul16S50NEJP7uwBfS5+9KVX00wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnjvJuw EEiW5VvKCnXwabpexjOBMB8GA1UdIwQYMBaAFM2pnnvTP47Hcf0TnNazcAycmPIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkRFQS9GMDFERTMwQ0M2 OUYxMUVBQTU1Q0IwNDBDNEY5QUUwMi96YW1lZTlNX2pzZHhfUk9jMXJOd0RKeVk4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phbWVlOU1fanNkeF9ST2Mxck53REp5WThqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkRFQS9GMDFERTMwQ0M2OUYxMUVBQTU1Q0IwNDBDNEY5QUUwMi96YW1lZTlNX2pz ZHhfUk9jMXJOd0RKeVk4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhGQzOlxh3rsmWu5fiK/mi0d24kT5onyZ6DAlnQo8x9UYl51T0dACy xJsWlM+JuOA+WgXzHPQzz2tI/jSeDivHRHYJyoRZEgwe/PtUhM7Y1Pnq5i+HHEGM YVc1DBSkGNw1VHXOniUrbaaENiKz2tDKIOEpkQFcm1D4ClS5Q3Bs9APDNxlLo79a 5BCOpF1Gfjv9bwsaVqb61O6I1NKUr2BndKArD0cUJkfkVzDE7DlTmP6q7jVwgSOb n3G5YhvdBiN2FzAkaEh5aEn1lzDt4IRxLxN9ibPvwTzJw7vdqIkp+pjuyJBuev4e Za2xKmNpa/PSWa9H45I7kf7Y+iqEbyXh -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:29 2025 by rpki-client